DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
672b19bc019111a6631136ebb54381ba_JaffaCakes118.dll
Resource
win7-20240708-en
Target
672b19bc019111a6631136ebb54381ba_JaffaCakes118
Size
123KB
MD5
672b19bc019111a6631136ebb54381ba
SHA1
cdaf26912c5e3d2a2930d4b04f36adce36feabc7
SHA256
65e7269865d37df0bbd7267565a88208b2626969fe3b70a1cfa0c7c64ae65afe
SHA512
732aa9d22f330328e78ab232ca8031e2de1c3477a85becb8e428066afde5b468de20a982a96043eca8f0516fb6c66cefa73db1125242dbce6326254a608bd0b2
SSDEEP
3072:u0+8meayS1e+JiKIs7D79SVGYSfUCTD57ByoNu:u0+gayS1eaIuZWLSfUCTVa
Checks for missing Authenticode signature.
resource |
---|
672b19bc019111a6631136ebb54381ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
GetTextCharsetInfo
OpenServiceW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE